Overview

overview

8

Static

static

8

mpresas.msi

windows7_x64

8

mpresas.msi

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    mpresas.msi
  • Size 3.3MB
  • Sample200707-t1vybbdcyj
  • SHA256 1d920f023b0bec46b62fc028689ced3ae13eb73347a1c102a88b2f37a9018598
  • MD5 SHA1 SHA512
Score
8/10
macropersistence

Malware Config

Targets

    • Target
      mpresas.msi
    • Size 3.3MB
    • SHA256 1d920f023b0bec46b62fc028689ced3ae13eb73347a1c102a88b2f37a9018598
    • MD5 SHA1 SHA512
    Score
    8/10
    persistence

    • Blacklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run entry to start application

      persistence

    • Enumerates connected drives

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks